Security News > 2020 > November > Gold seller JM Bullion hacked to steal customers' credit cards

Gold seller JM Bullion hacked to steal customers' credit cards
2020-11-01 12:53

Precious metal online retailer JM Bullion has disclosed a data breach after their site was hacked to include malicious scripts that stole customers' credit card information.

JM Bullion is an online retailer of gold, silver, copper, platinum, and palladium products, including coins and bullion.

"On July 6, 2020, JM Bullion was alerted to suspicious activity on its website. JM Bullion immediately began an investigation, with the assistance of a third-party forensic specialist, to assess the nature and scope of the incident. Through an investigation, it was determined that malicious code was present on the website from February 18, 2020 to July 17, 2020, which had the ability to capture customer information entered into the website in limited scenarios while making a purchase," JM Bullion's data security incident stated.

The malicious code was removed from the site on July 17th, 2020, and JM Bullion notified law enforcement, their credit card processor, and all impacted credit card brands.

All customers who made purchases on JM Bullion's site between February 18th, 2020, to July 17th, 2020, should monitor their credit card statements for fraudulent activity.


News URL

https://www.bleepingcomputer.com/news/security/gold-seller-jm-bullion-hacked-to-steal-customers-credit-cards/